$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B90E1C062C45005F873B80B430CB2452709E2963.cer File: B90E1C062C45005F873B80B430CB2452709E2963.cer (raw, json) Hash identifier: +D4TAk24ffR3pXJPrgAS2ZWK2CC+TCfqVQgg+T7ZQLs= Subject key identifier: B9:0E:1C:06:2C:45:00:5F:87:3B:80:B4:30:CB:24:52:70:9E:29:63 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 16D932E71DC4FA65E9A7B19F9525826FCAE278F2 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/6B04589D97B7588172512615CFFD3AE3F7A7E3495B08FFCBA03D20BE620A1BC2/0/B90E1C062C45005F873B80B430CB2452709E2963.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/6B04589D97B7588172512615CFFD3AE3F7A7E3495B08FFCBA03D20BE620A1BC2/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 28 Jan 2026 17:34:26 +0000 Certificate not after: Wed 27 Jan 2027 17:39:26 +0000 Subordinate resources: AS: 263820 IP: 138.219.160.0/22 IP: 2803:2a40::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 07 Mar 2026 04:33:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:d9:32:e7:1d:c4:fa:65:e9:a7:b1:9f:95:25:82:6f:ca:e2:78:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 28 17:34:26 2026 GMT Not After : Jan 27 17:39:26 2027 GMT Subject: CN=B90E1C062C45005F873B80B430CB2452709E2963 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:b3:bb:40:98:5b:0d:95:eb:f4:ec:13:62:f1: b8:b2:a7:94:09:87:e7:47:4c:5f:35:60:eb:82:54: 2a:89:03:40:55:2e:83:fc:15:2c:b2:93:64:8b:88: be:1c:42:4c:ea:7e:65:15:91:c7:2d:12:fe:9f:79: 35:52:5b:98:63:21:96:86:7d:ce:c3:d8:e7:00:f4: d8:25:04:98:c0:30:b6:8f:ac:b8:4f:1f:af:9e:c7: aa:1f:2f:4a:15:4c:31:68:4a:57:fb:d3:f1:d4:db: 18:4c:50:b8:9e:18:29:d5:7d:47:1d:62:fc:f8:a0: 39:23:e8:79:7d:7c:15:88:54:e5:d7:75:50:49:33: 32:b2:77:ce:e8:73:c6:b5:46:cc:c9:6b:52:95:74: e1:8d:bf:c9:f9:1f:e6:6f:05:48:e4:63:19:44:30: 74:51:de:48:02:6d:75:e5:a1:a3:c8:44:3c:72:9f: d0:46:fc:73:02:ab:d8:fb:91:59:7f:01:6e:3f:d0: bb:43:41:b8:4a:9e:db:69:98:10:5e:4a:a1:75:23: 63:fc:a4:da:0f:bd:4a:e8:d2:89:f9:f2:e5:a7:94: ed:c8:49:82:59:88:df:06:7b:ac:78:1b:88:79:8c: d8:9d:87:77:a4:68:13:c8:08:59:c4:b2:1f:b3:dd: 39:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B9:0E:1C:06:2C:45:00:5F:87:3B:80:B4:30:CB:24:52:70:9E:29:63 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/6B04589D97B7588172512615CFFD3AE3F7A7E3495B08FFCBA03D20BE620A1BC2/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/6B04589D97B7588172512615CFFD3AE3F7A7E3495B08FFCBA03D20BE620A1BC2/0/B90E1C062C45005F873B80B430CB2452709E2963.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.219.160.0/22 IPv6: 2803:2a40::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 263820 Signature Algorithm: sha256WithRSAEncryption 8a:5e:e3:4a:cc:94:d5:4d:61:a6:f2:c5:11:ac:53:f8:76:53: 30:c4:cb:0a:a3:81:45:11:01:d8:5c:8f:c7:7a:39:ed:fd:1a: fc:77:bb:9a:23:37:e7:64:22:44:e5:99:0d:af:94:81:02:ce: 25:b2:78:82:c2:8c:51:d2:70:cb:f9:0b:8a:91:66:b0:98:46: f4:e3:33:69:13:8c:23:95:2d:7e:a9:a5:9a:f2:34:de:6a:29: 22:09:55:50:b1:c7:c8:09:0a:18:38:c6:15:d7:06:1d:1e:26: c9:9b:ff:63:b3:3b:6f:c2:9d:f6:bf:4f:9f:aa:a1:a5:17:42: 0e:15:68:e2:7c:82:91:4a:ef:0a:83:c6:a0:59:fd:13:fc:71: 1f:f9:b0:b1:07:cd:ea:e1:2f:38:76:90:18:6d:3b:dd:c9:c2: 57:ff:b4:da:8d:55:73:c0:84:b2:d4:b2:66:b5:5b:7c:43:dd: a0:3e:40:30:37:4a:ab:c4:35:f5:54:77:fb:74:c3:8d:d5:67: b4:0d:04:6a:59:69:02:7c:58:83:04:29:af:0a:f1:57:36:57: 9b:e8:20:20:36:cc:81:b7:fd:e1:bb:30:0a:61:c9:90:9d:1e: d4:ae:25:6d:5c:72:af:5c:16:0c:1a:e0:5c:d9:40:e9:08:d8: be:93:99:36 -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUFtky5x3E+mXpp7GflSWCb8riePIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjgxNzM0MjZaFw0yNzAxMjcxNzM5MjZaMDMxMTAvBgNV BAMTKEI5MEUxQzA2MkM0NTAwNUY4NzNCODBCNDMwQ0IyNDUyNzA5RTI5NjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzs7tAmFsNlev07BNi8biyp5QJ h+dHTF81YOuCVCqJA0BVLoP8FSyyk2SLiL4cQkzqfmUVkcctEv6feTVSW5hjIZaG fc7D2OcA9NglBJjAMLaPrLhPH6+ex6ofL0oVTDFoSlf70/HU2xhMULieGCnVfUcd Yvz4oDkj6Hl9fBWIVOXXdVBJMzKyd87oc8a1RszJa1KVdOGNv8n5H+ZvBUjkYxlE MHRR3kgCbXXloaPIRDxyn9BG/HMCq9j7kVl/AW4/0LtDQbhKnttpmBBeSqF1I2P8 pNoPvUro0on58uWnlO3ISYJZiN8Ge6x4G4h5jNidh3ekaBPICFnEsh+z3Tm1AgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS5DhwGLEUAX4c7 gLQwyyRScJ4pYzAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNkIwNDU4OUQ5N0I3NTg4MTcyNTEyNjE1 Q0ZGRDNBRTNGN0E3RTM0OTVCMDhGRkNCQTAzRDIwQkU2MjBBMUJDMi8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy82QjA0NTg5RDk3Qjc1ODgxNzI1MTI2MTVDRkZEM0FFM0Y3QTdFMzQ5NUIw OEZGQ0JBMDNEMjBCRTYyMEExQkMyLzAvQjkwRTFDMDYyQzQ1MDA1Rjg3M0I4MEI0 MzBDQjI0NTI3MDlFMjk2My5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCitugMA0EAgAC MAcDBQAoAypAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQGjDANBgkqhkiG9w0B AQsFAAOCAQEAil7jSsyU1U1hpvLFEaxT+HZTMMTLCqOBRREB2FyPx3o57f0a/He7 miM352QiROWZDa+UgQLOJbJ4gsKMUdJwy/kLipFmsJhG9OMzaROMI5UtfqmlmvI0 3mopIglVULHHyAkKGDjGFdcGHR4myZv/Y7M7b8Kd9r9Pn6qhpRdCDhVo4nyCkUrv CoPGoFn9E/xxH/mwsQfN6uEvOHaQGG073cnCV/+02o1Vc8CEstSyZrVbfEPdoD5A MDdKq8Q19VR3+3TDjdVntA0EallpAnxYgwQprwrxVzZXm+ggIDbMgbf94bswCmHJ kJ0e1K4lbVxyr1wWDBrgXNlA6QjYvpOZNg== -----END CERTIFICATE-----Generated at Mon Mar 2 15:02:43 2026 by rpki-client